---
name: cyberstrikeus/wstg-inpv-01
source: https://app.decimal.ai/s/cyberstrikeus-wstg-inpv-01@1/SKILL.md
source_sha256: 00db954cd06e
---
# wstg-inpv-01
## Test ID
WSTG-INPV-01
## Test Name
Testing for Reflected Cross-Site Scripting (XSS)
## High-Level Description
Reflected XSS occurs when user input is immediately returned by the application without proper sanitization. The malicious script is reflected off the web server in error messages, search results, or any response that includes user input. This allows attackers to execute scripts in victims' browsers through crafted URLs.
---
## What to Check
- [ ] URL parameters reflected in response
- [ ] Form inputs reflected in response
- [ ] HTTP headers reflected in response
- [ ] Error messages containing user input
- [ ] Search functionality
- [ ] Redirect parameters
---
## How to Test
### Step 1: Identify Reflection Points
```bash
#!/bin/bash
TARGET="https://target.com"
# Test common parameters for reflection
PARAMS=("q" "search" "query" "s" "id" "page" "name" "url" "redirect" "callback")
TEST_STRING="xss_test_12345"
for param in "${PARAMS[@]}"; do
response=$(curl -s "$TARGET?$param=$TEST_STRING")
if echo "$response" | grep -q "$TEST_STRING"; then
echo "[*] Reflection found in parameter: $param"
fi
done
# Test POST forms
curl -s "$TARGET/search" -d "query=$TEST_STRING" | grep -q "$TEST_STRING" && \
echo "[*] Reflection in POST parameter: query"
```
### Step 2: Reflected XSS Tester
```python
#!/usr/bin/env python3
"""
Reflected XSS Vulnerability Tester
"""
import requests
import re
from urllib.parse import urljoin, quote
from html import escape
class ReflectedXSSTester:
def __init__(self, url):
self.url = url
self.findings = []
self.session = requests.Session()
self.session.headers['User-Agent'] = 'Mozilla/5.0 XSS-Tester'
# Basic XSS payloads
PAYLOADS = [
# Basic script injection
'',
'',
# Event handlers
'',
'